CVE-2024-0161

Published: Mar 13, 2024Modified: Jun 17, 2026

8.4

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

Exploitability: 2.0 / Impact: 5.8

Source: NVD

Description

Dell PowerEdge Server BIOS and Dell Precision Rack BIOS contain an Improper SMM communication buffer verification vulnerability. A local low privileged attacker could potentially exploit this vulnerability leading to arbitrary writes to SMRAM.

Affected (86)

Dell

86 products

Poweredge T360 Firmware

Poweredge R360 Firmware

Poweredge R650 Firmware

Poweredge R750 Firmware

Poweredge R750xa Firmware

Poweredge C6520 Firmware

Poweredge Mx750c Firmware

Poweredge R550 Firmware

Poweredge R450 Firmware

Poweredge R650xs Firmware

Poweredge R750xs Firmware

Poweredge T550 Firmware

Poweredge Xr11 Firmware

Poweredge Xr12 Firmware

Poweredge Xr4510c Firmware

Poweredge Xr4520c Firmware

Poweredge T150 Firmware

Poweredge T350 Firmware

Poweredge R250 Firmware

Poweredge R350 Firmware

Poweredge R740 Firmware

Poweredge R740xd Firmware

Poweredge R640 Firmware

Poweredge R940 Firmware

Poweredge R540 Firmware

Poweredge R440 Firmware

Poweredge T440 Firmware

Poweredge Xr2 Firmware

Poweredge R740xd2 Firmware

Poweredge R840 Firmware

Poweredge R940xa Firmware

Poweredge T640 Firmware

Poweredge C6420 Firmware

Poweredge Fc640 Firmware

Poweredge M640 Firmware

Poweredge M640 (pe Vrtx) Firmware

Poweredge Mx740c Firmware

Poweredge Mx840c Firmware

Poweredge C4140 Firmware

Dss 8440 Firmware

Poweredge Xe2420 Firmware

Poweredge Xe7420 Firmware

Poweredge Xe7440 Firmware

Poweredge R730 Firmware

Poweredge R730xd Firmware

Poweredge R630 Firmware

Poweredge C4130 Firmware

Poweredge R930 Firmware

Poweredge M630 Firmware

Poweredge M630 (pe Vrtx) Firmware

Poweredge Fc630 Firmware

Poweredge Fc430 Firmware

Poweredge M830 Firmware

Poweredge M830 (pe Vrtx) Firmware

Poweredge Fc830 Firmware

Poweredge T630 Firmware

Poweredge R530 Firmware

Poweredge R430 Firmware

Poweredge T430 Firmware

Poweredge R830 Firmware

Poweredge C6320 Firmware

Poweredge T130 Firmware

Poweredge R230 Firmware

Poweredge T330 Firmware

Poweredge R330 Firmware

Emc Storage Nx3240 Firmware

Emc Storage Nx3340 Firmware

Storage Nx3230 Firmware

Storage Nx3330 Firmware

Storage Nx430 Firmware

Emc Xc Core Xc450 Firmware

Emc Xc Core Xc650 Firmware

Emc Xc Core Xc750 Firmware

Emc Xc Core Xc750xa Firmware

Emc Xc Core Xc6520 Firmware

Emc Xc Core 6420 Firmware

Emc Xc Core Xc640 Firmware

Emc Xc Core Xc740xd Firmware

Emc Xc Core Xc740xd2 Firmware

Emc Xc Core Xc940 Firmware

Emc Xc Core Xcxr2 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge T360 Firmware	Before 1.1.1

Running on/with	Platform Versions
Dell Poweredge T360	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R360 Firmware	Before 1.1.1

Running on/with	Platform Versions
Dell Poweredge R360	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R650 Firmware	Before 1.13.2

Running on/with	Platform Versions
Dell Poweredge R650	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R750 Firmware	Before 1.13.2

Running on/with	Platform Versions
Dell Poweredge R750	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R750xa Firmware	Before 1.13.2

Running on/with	Platform Versions
Dell Poweredge R750xa	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge C6520 Firmware	Before 1.13.2

Running on/with	Platform Versions
Dell Poweredge C6520	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge Mx750c Firmware	Before 1.13.2

Running on/with	Platform Versions
Dell Poweredge Mx750c	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R550 Firmware	Before 1.13.2

Running on/with	Platform Versions
Dell Poweredge R550	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R450 Firmware	Before 1.13.2

Running on/with	Platform Versions
Dell Poweredge R450	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R650xs Firmware	Before 1.13.2

Running on/with	Platform Versions
Dell Poweredge R650xs	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R750xs Firmware	Before 1.13.2

Running on/with	Platform Versions
Dell Poweredge R750xs	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge T550 Firmware	Before 1.13.2

Running on/with	Platform Versions
Dell Poweredge T550	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge Xr11 Firmware	Before 1.13.2

Running on/with	Platform Versions
Dell Poweredge Xr11	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge Xr12 Firmware	Before 1.13.2

Running on/with	Platform Versions
Dell Poweredge Xr12	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge Xr4510c Firmware	Before 1.14.1

Running on/with	Platform Versions
Dell Poweredge Xr4510c	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge Xr4520c Firmware	Before 1.14.1

Running on/with	Platform Versions
Dell Poweredge Xr4520c	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge T150 Firmware	Before 1.9.1

Running on/with	Platform Versions
Dell Poweredge T150	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge T350 Firmware	Before 1.9.1

Running on/with	Platform Versions
Dell Poweredge T350	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R250 Firmware	Before 1.9.1

Running on/with	Platform Versions
Dell Poweredge R250	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R350 Firmware	Before 1.9.1

Running on/with	Platform Versions
Dell Poweredge R350	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R740 Firmware	Before 2.21.2

Running on/with	Platform Versions
Dell Poweredge R740	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R740xd Firmware	Before 2.21.2

Running on/with	Platform Versions
Dell Poweredge R740xd	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R640 Firmware	Before 2.21.2

Running on/with	Platform Versions
Dell Poweredge R640	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R940 Firmware	Before 2.21.2

Running on/with	Platform Versions
Dell Poweredge R940	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R540 Firmware	Before 2.21.1

Running on/with	Platform Versions
Dell Poweredge R540	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R440 Firmware	Before 2.21.1

Running on/with	Platform Versions
Dell Poweredge R440	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge T440 Firmware	Before 2.21.1

Running on/with	Platform Versions
Dell Poweredge T440	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge Xr2 Firmware	Before 2.21.1

Running on/with	Platform Versions
Dell Poweredge Xr2	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R740xd2 Firmware	Before 2.21.1

Running on/with	Platform Versions
Dell Poweredge R740xd2	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R840 Firmware	Before 2.21.0

Running on/with	Platform Versions
Dell Poweredge R840	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R940xa Firmware	Before 2.21.0

Running on/with	Platform Versions
Dell Poweredge R940xa	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge T640 Firmware	Before 2.21.0

Running on/with	Platform Versions
Dell Poweredge T640	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge C6420 Firmware	Before 2.21.0

Running on/with	Platform Versions
Dell Poweredge C6420	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge Fc640 Firmware	Before 2.21.0

Running on/with	Platform Versions
Dell Poweredge Fc640	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge M640 Firmware	Before 2.21.0

Running on/with	Platform Versions
Dell Poweredge M640	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge M640 (pe Vrtx) Firmware	Before 2.21.0

Running on/with	Platform Versions
Dell Poweredge M640 (pe Vrtx)	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge Mx740c Firmware	Before 2.21.0

Running on/with	Platform Versions
Dell Poweredge Mx740c	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge Mx840c Firmware	Before 2.21.0

Running on/with	Platform Versions
Dell Poweredge Mx840c	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge C4140 Firmware	Before 2.21.1

Running on/with	Platform Versions
Dell Poweredge C4140	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Dss 8440 Firmware	Before 2.21.0

Running on/with	Platform Versions
Dell Dss 8440	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge Xe2420 Firmware	Before 2.21.1

Running on/with	Platform Versions
Dell Poweredge Xe2420	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge Xe7420 Firmware	Before 2.21.0

Running on/with	Platform Versions
Dell Poweredge Xe7420	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge Xe7440 Firmware	Before 2.21.0

Running on/with	Platform Versions
Dell Poweredge Xe7440	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R730 Firmware	Before 2.19.0

Running on/with	Platform Versions
Dell Poweredge R730	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R730xd Firmware	Before 2.19.0

Running on/with	Platform Versions
Dell Poweredge R730xd	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R630 Firmware	Before 2.19.0

Running on/with	Platform Versions
Dell Poweredge R630	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge C4130 Firmware	Before 2.19.0

Running on/with	Platform Versions
Dell Poweredge C4130	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R930 Firmware	Before 2.14.0

Running on/with	Platform Versions
Dell Poweredge R930	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge M630 Firmware	Before 2.19.0

Running on/with	Platform Versions
Dell Poweredge M630	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge M630 (pe Vrtx) Firmware	Before 2.19.0

Running on/with	Platform Versions
Dell Poweredge M630 (pe Vrtx)	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge Fc630 Firmware	Before 2.19.0

Running on/with	Platform Versions
Dell Poweredge Fc630	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge Fc430 Firmware	Before 2.19.0

Running on/with	Platform Versions
Dell Poweredge Fc430	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge M830 Firmware	Before 2.19.0

Running on/with	Platform Versions
Dell Poweredge M830	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge M830 (pe Vrtx) Firmware	Before 2.19.0

Running on/with	Platform Versions
Dell Poweredge M830 (pe Vrtx)	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge Fc830 Firmware	Before 2.19.0

Running on/with	Platform Versions
Dell Poweredge Fc830	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge T630 Firmware	Before 2.19.0

Running on/with	Platform Versions
Dell Poweredge T630	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R530 Firmware	Before 2.19.0

Running on/with	Platform Versions
Dell Poweredge R530	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R430 Firmware	Before 2.19.0

Running on/with	Platform Versions
Dell Poweredge R430	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge T430 Firmware	Before 2.19.0

Running on/with	Platform Versions
Dell Poweredge T430	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R830 Firmware	Before 1.19.0

Running on/with	Platform Versions
Dell Poweredge R830	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge C6320 Firmware	Before 2.19.0

Running on/with	Platform Versions
Dell Poweredge C6320	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge T130 Firmware	Before 2.20.0

Running on/with	Platform Versions
Dell Poweredge T130	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R230 Firmware	Before 2.20.0

Running on/with	Platform Versions
Dell Poweredge R230	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge T330 Firmware	Before 2.20.0

Running on/with	Platform Versions
Dell Poweredge T330	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Poweredge R330 Firmware	Before 2.20.0

Running on/with	Platform Versions
Dell Poweredge R330	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Emc Storage Nx3240 Firmware	Before 2.21.2

Running on/with	Platform Versions
Dell Emc Storage Nx3240	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Emc Storage Nx3340 Firmware	Before 2.21.2

Running on/with	Platform Versions
Dell Emc Storage Nx3340	All versions

Configuration P

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Storage Nx3230 Firmware	Before 2.19.0

Running on/with	Platform Versions
Dell Storage Nx3230	All versions

Configuration Q

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Storage Nx3330 Firmware	Before 2.19.0

Running on/with	Platform Versions
Dell Storage Nx3330	All versions

Configuration R

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Storage Nx430 Firmware	Before 2.20.0

Running on/with	Platform Versions
Dell Storage Nx430	All versions

Configuration S

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Emc Xc Core Xc450 Firmware	Before 1.13.2

Running on/with	Platform Versions
Dell Emc Xc Core Xc450	All versions

Configuration T

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Emc Xc Core Xc650 Firmware	Before 1.13.2

Running on/with	Platform Versions
Dell Emc Xc Core Xc650	All versions

Configuration U

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Emc Xc Core Xc750 Firmware	Before 1.13.2

Running on/with	Platform Versions
Dell Emc Xc Core Xc750	All versions

Configuration V

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Emc Xc Core Xc750xa Firmware	Before 1.13.2

Running on/with	Platform Versions
Dell Emc Xc Core Xc750xa	All versions

Configuration W

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Emc Xc Core Xc6520 Firmware	Before 1.13.2

Running on/with	Platform Versions
Dell Emc Xc Core Xc6520	All versions

Configuration X

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Emc Xc Core 6420 Firmware	Before 2.21.0

Running on/with	Platform Versions
Dell Emc Xc Core 6420	All versions

Configuration Y

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Emc Xc Core Xc640 Firmware	Before 2.21.2

Running on/with	Platform Versions
Dell Emc Xc Core Xc640	All versions

Configuration Z

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Emc Xc Core Xc740xd Firmware	Before 2.21.2

Running on/with	Platform Versions
Dell Emc Xc Core Xc740xd	All versions

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Emc Xc Core Xc740xd2 Firmware	Before 2.21.1

Running on/with	Platform Versions
Dell Emc Xc Core Xc740xd2	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Emc Xc Core Xc940 Firmware	Before 2.21.2

Running on/with	Platform Versions
Dell Emc Xc Core Xc940	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Emc Xc Core Xcxr2 Firmware	Before 2.21.1

Running on/with	Platform Versions
Dell Emc Xc Core Xcxr2	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Xc6320 Firmware	Before 2.19.0

Running on/with	Platform Versions
Dell Xc6320	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Xc430 Firmware	Before 2.19.0

Running on/with	Platform Versions
Dell Xc430	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Xc630 Firmware	Before 2.19.0

Running on/with	Platform Versions
Dell Xc630	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Xc730 Firmware	Before 2.19.0

Running on/with	Platform Versions
Dell Xc730	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell Xc730xd Firmware	Before 2.19.0

Running on/with	Platform Versions
Dell Xc730xd	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://www.dell.com/support/kbdoc/en-us/000222979/dsa-2024-006-security-update-for-dell-poweredge-server-bios-for-an-improper-smm-communication-buffer-verification-vulnerability

Source: security_alert@emc.com

Vendor Advisory

https://www.dell.com/support/kbdoc/en-us/000222979/dsa-2024-006-security-update-for-dell-poweredge-server-bios-for-an-improper-smm-communication-buffer-verification-vulnerability

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.